diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 2c97b8e9a..8eeabc658 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -1,8 +1,9 @@
 # Release 2.4
- * The Openalias/DNSSEC plugin was merged into the main electrum
-   code. The DNSSEC verification procedure was rewritten. The previous
-   validation method, which was part of the OpenAlias plugin, is
-   vulnerable and should not be trusted (Electrum 2.0 to 2.3).
+ * The Openalias/DNSSEC plugin was merged into the main electrum code.
+   The validation of aliases uses DNSSEC and requires pyCrypto.
+ * The DNSSEC validation code was rewritten. The previous validation
+   method, which was part of the OpenAlias plugin, is vulnerable and
+   should not be trusted (Electrum 2.0 to 2.3).
  * BIP70 payment requests can be signed using Bitcoin keys stored in
    DNS (OpenAlias). The identity of the requestor is verified using
    DNSSEC.